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Top Stories 

• Bank of America agreed August 21 to pay $16.65 billion in a settlement with the U.S. 
Department of Justice over the bank’s misrepresentation of risky mortgage -backed 
securities to clients prior to the 2008 financial cxisi?,.- Associated Press (See item 4 ) 

• The United Parcel Service (UPS) announced August 20 that a security breach at 5 1 of its 
UPS Stores in 24 States may have exposed the personal information, including addresses 
and payment card information, of customers who completed transactions between January 
20 and August 11.- Computerworld (See item 9 ) 

• Incapsula reported that a client experienced a distributed denial of service (DDoS) attack 
that lasted 38 days between June 21 and July 28, used several attack vectors, and peaked at 
over 110 Gbps.- Softpedia (See item 2^ 

• One person was killed, 9 others were injured, and at least 2 dozen people were potentially 
displaced after an August 20 fire that begin on the main level of a 3-story Brighton 
apartment building in Boston, Massachusetts, spread to an adjacent home. 

- Boston Globe (See item 28) 




Fast Jump Menu 



PRODUCTION INDUSTRIES 

• Energy 

• Chemical 

• Nuclear Reactors. Materials, and Waste 

• Critical Manufacturing 

• Defense Industrial Base 

• Dams 

SUSTENANCE and HEAI.TH 

• Food and Agriculture 

• Water and Wastewater Systems 

• Healthcare and Public Health 



SERVICE INDUSTRIES 

• Financial Seryices 

• Transportation Systems 

• Information Technology 

• Communications 

• Commercial Facilities 
FEDERAL and STATE 

• Goyernment Facilities 

• Emergency Seryices 



1 - 



Energy Sector 

1. August 21, Pittsburgh Tribune-Review - (Pennsylvania) DEP to spend $1.45M to 
snuff coal fire posing threat by Pittsburgh airport. The Pennsylvania Department of 
Environmental Protection announced August 21 that it will begin a $1.45 million 
project in September to extinguish a fire in a coal pile near the Pittsburgh International 
Airport that is producing smoke, which could threaten a radar facility and an 
underground pipeline. 

Source: http://triblive.com/news/adminpage/6648077-74/coal-fire-agencv 

2. August 20, Newark Star-Ledger - (New Jersey) 3,000 gallons of jet fuel leak into 
storm sewer at petroleum company’s Linden terminal. Buckeye Partners officials 
are investigating the source of a leak after 3,000 gallons of jet fuel was released into the 
storm sewer at the company’s Linden facility August 20. The fuel, and an additional 
3,000 gallons of fuel mixed with water, were recovered from the onsite, self-contained 
sewer system and did not travel into any waterways. 

Source: 

http://www.nj.eom/union/index.ssf/2014/08/dep cleans up jet fuel in linden.html 

[ Return to top] 

Chemical Industry Sector 

3. August 21, WAFB 9 Baton Rouge - (Louisiana) Officials report hydrochloric acid 
leak at chemical plant. The Rubicon chemical plant in Geismar was briefly shut down 
overnight between August 20-21 after a hydrochloric acid leak was discovered and 
quickly contained. Another nearby plant was also placed under shelter-in-place orders 
during the Rubicon leak. 

Source: http://www.wafb.com/storv/26334256/officials-report-hvdrochloric-acid-leak- 
at-chemic al-plant 

[ Return to top i 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

See item 10 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

4. August 21, Associated Press - (National) Bank of America agrees to nearly $17B 
settlement. Bank of America agreed to pay $16.65 billion August 21 as part of an 
agreement to settle U.S. Department of Justice charges that the bank and its subsidiaries 
misrepresented risky mortgage-backed securities to clients prior to the 2008 financial 
crisis. The total includes a $5 billion penalty, $4.6 billion in remediation, and around $7 
billion in relief to homeowners harmed by the bank’s practices. 

Source: http://abcnews.go.com/Politics/wireStorv/apnewsbreak-bofa-reaches-17b- 
settlement-us-25055433 

5. August 21, WOlO 19 Shaker Heights - (National) Two men indicted for $6.5 million 
investment fraud. The co-founders of Integrity Financial AZ LLC were indicted for 
allegedly operating the company as an investment fraud scheme that defrauded around 
60 investors out of more than $6.5 million. The alleged scheme advertised investment 
opportunities in a purported real estate development plan in Arizona and had regional 
offices in Cleveland, Chicago, and Sacramento, California, and used investors’ money 
for the personal enrichment of the co-founders. 

Source: http://www.19actionnews.com/storv/26335022/two-men-indicted-for-65- 
millon-investment-fraud 

6. August 20, U.S. Department of Justice - (Florida; Illinois) Former Hillsborough 
County resident pleads guilty to conspiracy to commit bank, wire and mail fraud. 
A Chicago man pleaded guilty August 20 to using his company. Capital Management 
Guarantee LLC, to participate in a conspiracy to commit wire, bank, and mail fraud 
connected to the purchase of The Arbors apartment complex in Hillsborough County, 
Florida, and the sale of condominium units. The man admitted to helping to induce 
buyers by offering kickbacks to buyers, concealing the facts and violating the terms of 
a loan from Corns Bank. 

Source: http://www.iustice.gov/usao/flm/press/2014/Aug/20140820 Bolger.html 
For additional stories, see items 9 and 26 



[ Return to top] 

Transportation Systems Sector 

7. August 21, WTRF 7 Wheeling - (Ohio) Torrential rains cause flooding across the 
Ohio Valley. All lanes on Ohio State Route 7 between Brilliant and Rayland reopened 
after being closed for nearly 5 hours due to heavy rain and flooding August 20. 

Source: http://www.wtrf.com/story/26324581/flood-advisories-issued-issued-across- 
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the-ohio-vallev 



8. August 20, Associated Press - (Arkansas) Cleanup still going at site of northeast 
Arkansas head-on train crash, highway still not open. U S. Route 67 in Hoxie 
remained closed August 20 and could remain closed into August 25 according to an 
Arkansas Highway and Transportation Department representative as crews continued to 
clean up the wreckage left from a head-on train collision. 

Source: http://www.foxbusiness.eom/markets/2014/08/20/cleanup-still-going-at-site- 
northeast-arkansas-head-on-train-crash-highway/ 

9. August 20, Computerworld - (National) UPS now the third company in a week to 
disclose data breach. The United Parcel Service (UPS) announced August 20 that a 
security breach at 5 1 of its UPS Stores in 24 States may have exposed the personal 
information, including addresses and payment card information, of customers who 
completed transactions between January 20 and August 11. An investigation found 
previously unknown malware was installed on individual stores’ systems but did not 
affect wider UPS networks. 

Source: 

http://www.computerworld.eom/s/article/9250545/UPS now the third company in a 
week to disclose data breach 

10. August 20, Softpedia - (Michigan) Traffic lights system hacked in Michigan. A team 
of researchers in Michigan conducted an experiment and were able to access nearly 100 
wirelessly networked traffic lights and cameras and found that the network can be 
easily accessed because of a lack of encryption, vulnerability to known exploits, and 
default logins and passwords. 

Source: http://news.softpedia.com/news/Traffic-Lights-Svstem-Hacked-in-Michigan- 
455713. shtml 

August 20, WHIO 7 Dayton- (Ohio) 1-70 re-opened after tanker spills liquid. All 
lanes on Interstate 70 in Clark County reopened August 20 after a semi-truck collapsed 
on itself and spilled an estimated 1,000 gallons of lubricant onto the highway, closing 
the interstate for several hours August 19. 

Source: http://www.whio.com/news/news/local/tanker-crash-i-70-west-clark-co-spills- 
gallons/ng5nx/ 



r Return to top ] 

Food and Agriculture Sector 

12. August 21, Associated Press - (Minnesota) Ash borer infestation found in Olmsted 
County. Minnesota officials confirmed that trees in Olmsted County are infested with 
the invasive emerald ash borer insect and added the county to others in the State that 
are quarantined to prevent the insects from spreading August 20. Ash tree lumber, 
chips, logs, and tree waste are not permitted to be taken out of the county unless 
authorized by the Minnesota Department of Agriculture. 

Source: http://w w w .twincities .com/localnews/ci 2637821 6/ash-borer- infestation- 
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13. August 20, Food Poisoning Bulletin - (Virginia) Corfinio Foods products recalled 
for possible botulism. The Virginia Department of Agriculture and Consumer Services 
warned consumers not to eat canned soups or sauces produced by Corfinio Foods of 
Richmond and sold at the Brandermill Green Market due to the products being 
improperly processed, posing a risk of Clostridium botulinum contamination. Corfinio 
Foods suspended production of the products and is working with State officials to come 
into compliance with processing requirements. 

Source: http://foodpoisoningbulletin.com/2014/corfinio-foods-products-recalled-for- 
possible-botulism/ 



[ Return to top] 

Water and Wastewater Systems Sector 

14. August 21, Traverse City Record Eagle - (Michigan) Sewage spill closes beaches. A 
swimming advisory was announced in Traverse City by health officials August 21 after 
the Traverse City Regional Sewage Treatment Facility accidently discharged about 200 
gallons of sewage into the north end of Boardman Lake August 20. The advisory 
covers the beach between Clinch and Bryant parks and will remain in effect until water 
quality returns to normal 

Source: http://www.record-eagle.com/news/local news/article 14f5cl le-6cad-58fe- 
8890-7bd276089610.html 

15. August 21, WTKR 3 Norfolk - (Virginia) Swimming advisory issued for several 
Newport News beaches. Several Newport News beaches were placed under a 
swimming advisory until further notice August 21 after water samples collected August 
19 showed high levels of bacteria. 

Source: http://wtkr.eom/2014/08/21/swimming-advisorv-issued-for-several-newport- 
news-beaches/ 

16. August 21, Central Kentucky News - (Kentucky) Boil water advisory for Garrard 
County. Garrard County Water issued a boil water advisory for customers in Paint 
Lick August 21 until further notice. 

Source: http://www.centralkvnews.com/amnews/boil-water-advisory-for-garrard- 
county/article 9dlc06ce-2935-l Ie4-a845-0017a43b2370.html 
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Healthcare and Public Health Sector 



17. August 20, WKYC 3 Cleveland - (Ohio) Fire breaks out at Lake County health 
department. An August 20 fire at the Lake County health department in Painesville 
caused significant damage to the building, forcing the county to relocate their services 
after repair work was estimated to take at least 4 months. 

Source: http://www.wkvc.eom/storv/news/local/lake-countv/2014/08/20/lake-countv- 
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general -health-district- fire/ 1 4326443/ 



18. August 18, Kansas City Star - (Kansas) Online data breach affects employees of 
Children’s Mercy Hospital. StayWell Health Management notified 4,076 Children’s 
Mercy Hospital employees and spouses that their personal information was stolen in a 
breach discovered in an online scheduling application stored by Onsite Health 
Diagnostics. The third-party vendor removed the data from the affected system, which 
included names and phone numbers, among other information that was collected in 
2012 . 

Source: http ://w w w .kans ascit y . com/ne ws/busines s/technolo g y/article 12505 44 .html 
For another story, see item 26 
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Government Facilities Sector 

19. August 21, Associated Press - (California) California wildfire destroys 8 homes, 10 
buildings. Fire crews reached 15 percent containment of a wildfire that burned about 5 
square miles in Kemville, California, and destroyed 8 homes and 10 additional 
structures. 

Source: http://news.msn.com/us/califomia-wildfire-destrovs-8-homes-lQ-buildings 

20. August 20, KTHV 11 Little Rock - (Arkansas) 3 injured in accident involving school 
bus, car. Three people were injured in an accident involving a Bauxite school bus and 
a car on Bauxite Cutoff August 20. 

Source: http://www.thvll.eom/storv/news/local/benton-brvant/2014/08/20/sheriffs- 
office-school-bus-accident-injures-three/14356605/ 

21. August 20, Jackson Clarion-Ledger - (Mississippi) Crystal Springs High School, 
Elementary evacuated for bomb threat. Crystal Springs High School and Crystal 
Springs Elementary in Mississippi were evacuated for several hours August 20 after a 
phoned bomb threat. Police searched the campus and did not find anything suspicious. 
Source: http://www.clarionledger.com/storv/news/2014/08/20/crystal-springs-high- 
school-bomb-threat/1433345 1/ 
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Emergency Services Sector 

22. August 20, New York Daily News - (New York) Five FDNY emergency responders 
taken to Queens hospital after being exposed to noxious substance. Five emergency 
responders and firefighters from the New York City Fire Department were taken to an 
area hospital after they were exposed to a noxious substance while responding to a 
residence in Queens August 20. The substance was believed to be a hazardous chemical 
used by a man to commit suicide. 

Source: http://www.nvdailvnews.com/new-vork/queens/fdnv-workers-exposed- 
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noxious-substance-qns-article- 1 . 1909848 



23. August 20, CNN; WBTW 13 Florence - (South Carolina) SC inmates moved after 
chemical issue. Several inmates from the Berkeley County Jail in Moncks Comer were 
moved to another part of the prison after a chemical leak that originated from a shower 
leak. Approximately 12 inmates were treated at a local hospital after complaining about 
fumes and breathing issues following repair work involving mineral spirits to clean the 
caulk. 

Source: http://www.wbtw.com/storv/26326343/sc-inmates-moved-after-chemical-issue 
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Information Technology Sector 

24. August 21, Softpedia - (International) 38-day long DDoS siege amounts to over 50 
petabits in bad traffic. Incapsula reported that a video game company client 
experienced a distributed denial of service (DDoS) attack that lasted 38 days between 
June 21 and July 28, used several attack vectors, and peaked at over 1 10 Gbps. The 
attack used techniques separately or at the same time and was mitigated by Incapsula 
using a scmbbing server. 

Source: http://news.softpedia.com/news/38-Dav-Long-DDoS-Siege-Amounts-to-Over- 
50-Petabits-in-Bad-Traffic-455722.shtml 



25. August 21, Help Net Security - (International) Most popular Android apps open 
users to MITM attacks. FireEye researchers conducted an analysis of the 1,000 most 
popular free Android apps in the Google Play store and found that many contain one or 
more vulnerabilities that could leave users vulnerable to man-in-the-middle (MitM) 
attacks. 

Source: http://www.net-securitv.org/secworld. php?id=17279 

26. August 20, Securityweek - (International) Graphic library flaw exposes apps created 
with Delphi, C++ Builder. Researchers with Core Security reported identifying a 
security vulnerability that can affect software with a specific version of Embarcadero 
C-i-i- Builder XE6, Embarcadero Delphi XE6, and possibly other versions. 

Embarcadero products are used by organizations and companies in industries including 
healthcare, financial services, and other industries to develop in-house applications. 
Source: http://www.securitvweek.com/graphic-library-flaw-exposes-apps-created- 
delphi-c-builder 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



27. August 20, Journal of The San Juan Islands - (Washington) CenturyLink faces 
$173K in fines for November outage. The Washington State Utilities and 
Transportation Commission eited CenturyLink with 15,935 violations and proposed 
$173,000 in fines for failing to communicate with the commission and its customers 
during a 10-day outage that left a majority of the San Juan Islands without telephone, 
Internet, and cell phone services during November 2013. 

Source: http ://w w w . s an j uan j oumal . com/new s/272083591 .html 
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Commercial Facilities Sector 

28. August 21, Boston Globe - (Massachusetts) Man killed in 4-alarm Brighton blaze. 
One person was killed, 9 others were injured, and at least 2 dozen people were 
potentially displaced after an August 20 fire that begin on the main level of a 3 -story 
Brighton apartment building in Boston and spread to an adjacent home. The total 
amount of damaged was estimated at more than $700,000. 

Source: http://www.bostonglobe.eom/metro/2014/08/21/four-alarm-fire-brighton- 
heavilv-damages-apartment-building/OxiwLRvFJrCTKSWMDsrVBO/story.html 



30. August 21, WJXX 25 JacksonvilleAVLTV 12 Jacksonville - (Florida) Neptune Beach 
pizzeria nearly destroyed by fire. An August 21 fire caused extensive damage to 
Ray’s Pizza in Neptune Beach, prompting the restaurant’s indefinite closure. 
Firefighters believe a faulty air conditioning unit may have caused the fire. 

Source: http ://www .firstcoastnews .com/storv/news/local/20 1 4/08/2 1/neptune-beach- 
pizzeria-fire/ 1437948 1/ 

31. August 20, News 12 New Jersey - (New Jersey) Large fire injures 1, causes 
evacuation in Cranford. A kitchen fire that spread to an entire floor at the Cranford 
Towers condominiums in New Jersey left dozens of residents displaced August 20. At 
least one floor was deemed uninhabitable. 

Source: http://newiersev.newsl2.com/news/large-fire-injures-l-causes-evacuation-in- 
cranford- 1.9 109843 



32. August 20, KPLC 7 Lake Charles - (Louisiana) Red Cross helps 21 after Iowa 
apartment fire. Twenty-one individuals were displaced in an August 20 fire that 
destroyed an 8-unit building in Iowa, Louisiana. 
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Source: http://www.kplctv.com/storv/26330899/red-cross-helps-21-after-iowa- 
apartment-fire 

For another story, see item 6 
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Dams Sector 



Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://w'W'vv'. dhs.gov/IPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support® govdeliverv.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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